$ ls -t ~/articles
The hackers– who may have links to cybercrime group Lapsus$ – are said to have compromised accounts to make emergency data requests on people's accounts that are using Apple and Facebook services. Apple and Facebook parent company Meta provided user data to cybercriminals last year who…
In case you haven't read former 2 articles on this topic, below are the links: Side-channel attacks The first 2 articles focused mainly on the idea and implementation of RSA. As such they left out a relevant topic in modern encryption. Side-channel attacks take advantage of data we'd usually…
Please note that it is essential for me to emphasize that the code and techniques presented here are intended solely for educational purposes and should never be employed in real-world applications without careful consideration and expert guidance. At the same time, understanding the principles…
Key generation works, encryption round-trips, the math is provably right — and an attacker can still recover the private key by timing your decryptions. Here are both defenses, measured, with what they actually cost.
Authentication remains one of the most painstaking challenges faced by cybersecurity professionals and researchers. This ranges from a small startup all th way to the biggest organizations. This longstanding and even fundamental element of security continues to cause everyone to have a headache.…
A major hack has resulted in approximately just a little over 600 million worth of cryptocurrency being stolen from Ronin. This was the gaming-focused blockchain network used for the NFT-based game Axie Infinity. Ronin said that roughtly 173,000 Ethereum and 25 million USDC – a stable coin…
Hackers have now begun to attack internet-connected universal power supply devices. They are targeting their control interfaces via multiple remote code execution vulnerabilities. In some of the cases, they changed the default usernames and passwords, according to an important advisory from the…
It's finally time that the US Department of Justice (DoJ) has charged three Russian FSB officers and a programmer that worked for a Russian military research institute. The past attacks were against industrial control systems (ICS) operated by critical infrastructure providers. Each of the…
Security Researchers have recent observed large application-layered distributed denial-of-service attacks using techniques that could end up foiling DDoS protection and defenses in the past few years. This could be yet another sign of things and change for web application operators. This attack…
Deno is now offering us faster calls into Rust are highlighted in the latest version of the Deno secure JavaScript/TypeScript runtime – drastically improving performance for everyone who uses the runtime. The Rust enhancement pertains to communication between the Google V8 JavaScript engine…
The amount of Ransomware attacks had reached unprecedented levels in 2021, with ransomware threat actors demanding, and in many cases receiving, ransom payments in the multiple sums of millions of dollars. The world’s largest meat processor, JBS, they confirmed in June 2021 that it paid the…
Java Development Kit (JDK) 18 is now available as an official production release. The new version of standard Java has nine new features, including a simple web server and another preview of pattern matching for switch. The OpenJDK page lists the following features as officially targeting JDK…
